Content area
Full text
Abstract: The increasing cybersecurity threats to higher education institutions in Africa necessitate risk management frameworks that are resilient and sensitive to regional needs. This paper applies Modified General Morphological Analysis (MGMA) to identify essential elements for an adaptable cybersecurity framework, focusing on the African higher education context. African institutions face many challenges, like limited funding, underdeveloped digital infrastructures, and rising cyberattacks. Our proposed MGMA is a structured methodology to examine key cybersecurity dimensions: governance, policy, technical controls, capacity building, and resource allocation. This approach allows for assessing complex interrelations among these elements, aimed at practical solutions suitable for African institutions. This study focuses on risk management approaches to address the specific vulnerabilities of African higher education institutions (HEIs), such as restricted budgets, inadequate cybersecurity teams, and increasing reliance on digital systems. The study promotes collaborative efforts by creating institutional networks, sharing resources, and enhancing cybersecurity expertise across Africa. The findings will guide decision-makers in aligning cybersecurity investments with strategic institutional goals, providing a framework for protecting critical educational assets, strengthening resilience, and advancing digital infrastructure development across African higher education.
Keywords: Cybersecurity risk management, Cybersecurity frameworks, Modified general morphological analysis, Cybersecurity strategies, Higher education in Africa
1. Introduction
Traditional cybersecurity frameworks, often crafted for more resourced sectors, struggle to meet the specific demands of educational environments, especially within the African context. This paper introduces an MGMA tailored for African HEIs to bridge these gaps. MGMA provides a structured, systems-based approach to assessing interconnected cybersecurity elements. Through focused analysis of governance, policy, technical controls, resource allocation, and capacity building, MGMA addresses the unique risks that African HEIs face. This method allows for a flexible, context-sensitive framework more suited to Africa's complex cybersecurity landscape of higher education.
This study aims to develop a comprehensive, adaptable cybersecurity framework for African HEIs by applying MGMA. Given Africa's specific challenges-from constrained resources to rising cyber incidents-this framework seeks to guide institutions in fortifying their cybersecurity practices in a sustainable, scalable manner. The study's relevance is rooted in its focus on Africa, a region often sidelined in broader cybersecurity discourse. By addressing both technical and organisational aspects of cybersecurity, this research contributes practical insights for African HEIs to protect their digital assets, maintain operational continuity, and navigate risks in an...




